Skip to content

v0.2.0 - security hardening + open-source standards

Choose a tag to compare

View all tags
@siva010928 siva010928 released this 15 Aug 13:54
· 24 commits to main since this release
v0.2.0
e6abeb7

Security hardening and open-source standardization.

Security

  • Fail-closed startup on shipped-default secrets when login is enforced (PREVIEW_MODE=false); the production compose now requires PLATFORM_ADMIN_TOKEN / SESSION_SECRET / DASHBOARD_ADMIN_PASSWORD and ships PREVIEW_MODE=false (no passwordless dashboard in prod).
  • Bundled LiteLLM engine upgraded to a patched, configurable version (1.83.14 via the LITELLM_VERSION build arg) - past the CVE fixes the README references. Constant-time admin-token comparison.

Engines

  • Engine image versions are env-configurable (BIFROST_VERSION, PORTKEY_VERSION, LITELLM_VERSION) and documented in docs/ENGINES.md ("Engine versions & how to change them").

CI/CD + governance

  • Ruff lint gate, dependency caching, and coverage in CI; new CodeQL, dependency-review, Dependabot, and tagged-release workflows (multi-arch GHCR image + SBOM).
  • Added docs/THREAT_MODEL.md, CODEOWNERS, .editorconfig, .gitattributes, .nvmrc, and pre-commit. /health now reports the running version.

Full details in CHANGELOG.md. Live demo: https://agnos-llm-gateway.site

Full Changelog: v0.1.0...v0.2.0

Assets 3
Loading